← 返回 Skills 市场
Prediction Bridge Skill
作者
kimCheese888
· GitHub ↗
· v1.0.0
802
总下载
2
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install prediction-bridge
功能描述
Query live prediction market data from the Prediction Bridge API. Use when the user asks about prediction markets, event odds, market prices, whale trades, trader analytics, or news related to prediction markets. Provides semantic search across 9+ platforms (Polymarket, Kalshi, Limitless, Probable, PredictFun, SxBet, Myriad, PancakeSwap), on-chain whale trade monitoring, Smart PnL analytics, and trader leaderboards. Run the bundled Python script to fetch real-time data.
安全使用建议
This skill appears internally consistent: the script does what the README says and does not ask for credentials. However the default API host (prediction-bridge.onrender.com) and the skill owner are unverified (no homepage). Before installing or using it with sensitive input: (1) review the full script (it is included) and confirm you are comfortable with network calls to the default endpoint, (2) do not submit private keys, passwords, or other secrets through the CLI, (3) if you want more assurance, run the script against a self-hosted/trusted proxy by setting PREDICTION_BRIDGE_URL to a vetted endpoint or run it in a sandbox, and (4) prefer skills with a named publisher and homepage for production use.
功能分析
Type: OpenClaw Skill
Name: prediction-bridge
Version: 1.0.0
The skill bundle itself does not contain explicitly malicious code. However, it presents two significant vulnerabilities. Firstly, the `SKILL.md` instructs the OpenClaw agent to execute `python scripts/prediction_bridge.py` with user-provided arguments. If the agent does not properly shell-escape these arguments, it creates a critical shell injection (RCE) vulnerability. Secondly, the `scripts/prediction_bridge.py` script allows overriding the `PREDICTION_BRIDGE_URL` via an environment variable, which, if controllable by an attacker (e.g., through prompt injection against the agent), could lead to Server-Side Request Forgery (SSRF) by redirecting API calls to an arbitrary endpoint. These are vulnerabilities in the agent's interaction with the skill, not direct malicious intent within the skill's code.
能力评估
Purpose & Capability
Name/description match the bundled CLI Python client. The code implements the commands described (search, events, whale-trades, analytics, etc.) and only makes HTTP requests to the configured API; there are no unrelated capabilities (no cloud SDKs, no database or OS-level access).
Instruction Scope
SKILL.md instructs running the included Python script; the script uses only stdlib and issues GET/POST requests to the API. It does not read arbitrary local files or request other environment variables beyond an optional PREDICTION_BRIDGE_URL. Note: user queries, wallet addresses, and market IDs supplied to the CLI will be transmitted to the remote API.
Install Mechanism
There is no install spec — instruction-only with an included script. No archives or remote installers are fetched during install. Risk from install mechanism is low.
Credentials
The skill does not require credentials or special environment variables; only an optional PREDICTION_BRIDGE_URL override is documented. No unexpected secrets or unrelated env vars are requested.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system configs. The skill can be invoked autonomously by the agent (platform default) which will cause network calls if used — this is normal but worth noting.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install prediction-bridge - 安装完成后，直接呼叫该 Skill 的名称或使用
/prediction-bridge触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of Prediction Bridge skill.
- Query real-time prediction market data from 9+ platforms via the Prediction Bridge API.
- Supports commands for semantic event search, listing events, market prices, whale trades, analytics, trader leaderboards, and news.
- Provides detailed command-line instructions and typical use cases.
- No external Python dependencies required; works with standard library only.
元数据
常见问题
Prediction Bridge Skill 是什么？
Query live prediction market data from the Prediction Bridge API. Use when the user asks about prediction markets, event odds, market prices, whale trades, trader analytics, or news related to prediction markets. Provides semantic search across 9+ platforms (Polymarket, Kalshi, Limitless, Probable, PredictFun, SxBet, Myriad, PancakeSwap), on-chain whale trade monitoring, Smart PnL analytics, and trader leaderboards. Run the bundled Python script to fetch real-time data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 802 次。
如何安装 Prediction Bridge Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install prediction-bridge」即可一键安装，无需额外配置。
Prediction Bridge Skill 是免费的吗？
是的，Prediction Bridge Skill 完全免费（开源免费），可自由下载、安装和使用。
Prediction Bridge Skill 支持哪些平台？
Prediction Bridge Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Prediction Bridge Skill？
由 kimCheese888（@kimcheese888）开发并维护，当前版本 v1.0.0。
推荐 Skills